Traffic Trace Info
DumpFile: 200201041400.dump
FileSize: 200.74MB
Id: 200201041400
StartTime: Fri Jan 4 14:00:00 2002
EndTime: Fri Jan 4 14:24:52 2002
TotalTime: 1491.86 seconds
TotalCapSize: 155.00MB CapLen: 96 bytes
# of packets: 2997369 (2021.25MB)
AvgRate: 11.37Mbps stddev:1.16M
IP flow (unique src/dst pair) Information
# of flows: 85101 (avg. 35.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.2% 6.8% 3.4% 2.7% 2.2% 2.2% 2.2% 2.1% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 64983
Top 10 bandwidth usage (bytes/total in %):
21.3% 17.3% 17.2% 6.9% 6.8% 3.8% 3.7% 3.4% 3.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200201041400.pktlen.png)
detailed numbers
[ 16- 31]: 8217
[ 32- 63]: 910130
[ 64- 127]: 467573
[ 128- 255]: 49017
[ 256- 511]: 58811
[ 512- 1023]: 264324
[ 1024- 2047]: 1239297
Protocol Breakdown
![[protocol breakdown chart]](200201041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 2997369 (100.00%) 2119435365 (100.00%) 707.10
ip 2984740 ( 99.58%) 2119054367 ( 99.98%) 709.96
tcp 2519445 ( 84.06%) 1699672413 ( 80.19%) 674.62
http(s) 540288 ( 18.03%) 529417471 ( 24.98%) 979.88
http(c) 280579 ( 9.36%) 24371670 ( 1.15%) 86.86
squid 167867 ( 5.60%) 11516848 ( 0.54%) 68.61
smtp 67381 ( 2.25%) 24449550 ( 1.15%) 362.86
nntp 299 ( 0.01%) 24795 ( 0.00%) 82.93
ftp 301283 ( 10.05%) 160380433 ( 7.57%) 532.32
pop3 17999 ( 0.60%) 8056782 ( 0.38%) 447.62
telnet 86 ( 0.00%) 5431 ( 0.00%) 63.15
ssh 24340 ( 0.81%) 15817374 ( 0.75%) 649.85
dns 990 ( 0.03%) 68303 ( 0.00%) 68.99
bgp 282 ( 0.01%) 45365 ( 0.00%) 160.87
napster 420838 ( 14.04%) 291277524 ( 13.74%) 692.14
realaud 1 ( 0.00%) 74 ( 0.00%) 74.00
rtsp 5964 ( 0.20%) 446702 ( 0.02%) 74.90
icecast 211 ( 0.01%) 92987 ( 0.00%) 440.70
hotline 172 ( 0.01%) 124127 ( 0.01%) 721.67
other 690738 ( 23.04%) 633572377 ( 29.89%) 917.24
udp 141437 ( 4.72%) 32950816 ( 1.55%) 232.97
dns 100305 ( 3.35%) 10110841 ( 0.48%) 100.80
rip 97 ( 0.00%) 6402 ( 0.00%) 66.00
realaud 7565 ( 0.25%) 3445590 ( 0.16%) 455.46
halflif 31 ( 0.00%) 1860 ( 0.00%) 60.00
starcra 16 ( 0.00%) 960 ( 0.00%) 60.00
everque 2 ( 0.00%) 123 ( 0.00%) 61.50
quake 462 ( 0.02%) 92703 ( 0.00%) 200.66
other 32943 ( 1.10%) 19288347 ( 0.91%) 585.51
icmp 317051 ( 10.58%) 385549089 ( 18.19%) 1216.05
ipsec 84 ( 0.00%) 15456 ( 0.00%) 184.00
ip6 2517 ( 0.08%) 672999 ( 0.03%) 267.38
other 4206 ( 0.14%) 193594 ( 0.01%) 46.03
frag 17346 ( 0.58%) 16845951 ( 0.79%) 971.17
tcpdump file: 200201041400.dump.gz (66.98 MB)